Possibly Related Threads…

blade33 · Nov 04, 2023, 08:26 PM

anybody got mysql password?

m1lk · Nov 04, 2023, 08:32 PM

(Nov 04, 2023, 08:26 PM)chillywilly Wrote: after a little poking around i found a hash

how did you get hash

blade33 · Nov 04, 2023, 08:36 PM

(Nov 04, 2023, 08:32 PM)m1lk Wrote:
(Nov 04, 2023, 08:26 PM)chillywilly Wrote: after a little poking around i found a hash

how did you get hash

look at /var/www/contact/

m1lk · Nov 04, 2023, 08:38 PM

(Nov 04, 2023, 08:36 PM)blade33 Wrote:
(Nov 04, 2023, 08:32 PM)m1lk Wrote:
(Nov 04, 2023, 08:26 PM)chillywilly Wrote: after a little poking around i found a hash

how did you get hash

look at /var/www/contact/

thanksss

z03 · Nov 04, 2023, 08:50 PM

/opt/scripts/mysql-backup.sh is vulnerable

blade33 · Nov 04, 2023, 08:51 PM

(Nov 04, 2023, 08:50 PM)z03 Wrote: /opt/scripts/mysql-backup.sh is vulnerable

no shit sherlock

hdddjik224636rggggq · (This post was last modified: Nov 04, 2023, 09:33 PM by hdddjik224636rggggq.)

(Nov 04, 2023, 08:38 PM)m1lk Wrote:
(Nov 04, 2023, 08:36 PM)blade33 Wrote:
(Nov 04, 2023, 08:32 PM)m1lk Wrote:
(Nov 04, 2023, 08:26 PM)chillywilly Wrote: after a little poking around i found a hash

how did you get hash

look at /var/www/contact/

thanksss

If are having toruble cracking it it's bcrypt and the command for hashcat is hashcat -a 0 -m 3200 hashes.txt wordlist.txt -w 3

chillywilly · Nov 04, 2023, 09:16 PM

(Nov 04, 2023, 09:02 PM)hdddjik224636rggggq Wrote:
(Nov 04, 2023, 08:38 PM)m1lk Wrote:
(Nov 04, 2023, 08:36 PM)blade33 Wrote:
(Nov 04, 2023, 08:32 PM)m1lk Wrote:
(Nov 04, 2023, 08:26 PM)chillywilly Wrote: after a little poking around i found a hash

how did you get hash

look at /var/www/contact/

thanksss

If anybody doesn't have the patience to crack it it's bcrypt

it only takes seconds for it to crack , dont give out full password :/

wh1t3pwn3r · Nov 04, 2023, 09:23 PM

(Nov 04, 2023, 08:51 PM)blade33 Wrote:
(Nov 04, 2023, 08:50 PM)z03 Wrote: /opt/scripts/mysql-backup.sh is vulnerable

no shit sherlock

Vulnerable to what exactly ?

chillywilly · Nov 04, 2023, 09:37 PM

i got mysql pwd but cant log in directly :/

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	[FREE] HackTheBox Dante - complete writeup written by Tamarisk	Tamarisk	602	91,618	2 hours ago Last Post: sabero_exe
	[FREE] CPTS 12 FLAGS	pulsebreaker	68	1,953	11 hours ago Last Post: VictorPipeau
	[FREE] 300+ Writeups PDF HackTheBox/HTB premium retired	Tamarisk	371	92,851	Today, 08:48 AM Last Post: phannguyenbaouy1
	[FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags	Techtom	21	2,620	Today, 05:08 AM Last Post: popoler
	Hack the box Pro Labs, VIP, VIP+ 1 month free Method	RedBlock	23	2,270	Yesterday, 02:10 PM Last Post: kkkato